Castuner
Submit a podcast

HeadFlash Security

HeadFlash

HeadFlash Security — a ~4-minute daily brief on cybersecurity: breaches, vulnerabilities and defense. New episode every weekday morning.

Podcast website

Listen in your app

Episodes

101 episodes

  1. UEFI flaw CVE-2026-97631 exposes servers worldwide to ring-0 code execution 5:25
  2. DHS breach exposes 41,000 staff; CISA orders Node2Shell patches 3:59
  3. Apple patches 329 flaws, including silent camera access 4:45
  4. Sandworm used Yggdrasil mesh network as C2 channel before wiping Ukrainian grain firm 4:29
  5. Hackers breach 70,000 firewall and VPN credentials; Midnight Mimosa malware found on cheap Android phones 10:27
  6. GitLab patches maximum-severity flaw reaching back to 2014 3:56
  7. PHP2Shell RCE Exploited Hours Before Patch as LiteLLM Wheel Ships Stealer 4:20
  8. Eight eMudhra TLS keys had entropy as low as 3 bits 4:39
  9. FBI arrests Canadian cyber executive Edward Dubrovsky in ShinyHunters extortion case 4:40
  10. BeyondTrust zero-day exploited since August; Oracle Health breach hits 19.9 million 12:42
  11. Palo Alto zero-day CVE-2026-0322 exploited, CISA orders fixes by October 17 4:43
  12. Midnight Mimosa malware found preinstalled on cheap Android phones 5:05
  13. Ivanti zero-day exploited, French fridges hijacked, npm trust flaw 5:21
  14. GitLab patches CVE-2026-97229, Telegram fixes one-click takeover 3:44
  15. Ledger Reseller Devices Tied to $71.5M Crypto Drain 10:01
  16. FBI Seizes Seven Domains Tied to Beijing's Flax Typhoon Hacking 3:51
  17. Atlassian 9.3 Flaw Hits 8 Products as FBI Seizes Deepfake CSAM Sites 4:14
  18. FBI and Secret Service warn FortiBleed campaign still active after 86,644 devices hit 3:50
  19. KVM zero-day lets guest VMs escape to host root, Vercel pays $50K 4:41
  20. Fortinet FortiMail zero-day exploited with no patch available 12:28
  21. PaperCut zero-days exploited to deploy AdaptixC2 implant on education print server 4:34
  22. Cloudflare to issue quantum-safe TLS certificates starting in Q1 2027 4:54
  23. Spectre v2 BTR attack leaks Linux root password hash in minutes 4:49
  24. FBI breach exposes data on agents in China and Russia units 4:30
  25. OpenAI halts training after agents breach sandbox again 10:49
  26. RSA signatures forged in 1,380 core-years via HSM oracle 3:42
  27. ShinyHunters claims FBI breach via Oracle zero-day, 3TB stolen 4:42
  28. vCenter zero-day chain lets attackers forge admin logins without a password 4:33
  29. CISA orders urgent patching of three exploited Linux kernel flaws 3:36
  30. Check Point RCE, Docker escape, 30,000 WaterPlum devices hit 9:30
  31. Cisco ISE Zero-Day Exploited; CISA Orders Three-Day Patch 3:32
  32. FBI Charges Five in Russian Murder Plot; Flock Camera Data Exposed 4:37
  33. Cisco Email Gateway Zero-Day Exploited; ScreenConnect Worm Patch Urged 4:13
  34. GitLab 10.0 Flaw Exploited as CISA Sets Patch Deadline 4:11
  35. Cisco FMC zero-day exploited by Sandworm implant and Qilin ransomware 32:50
  36. Microsoft patches record 974 flaws as two zero-days already exploited 8:16
  37. Stuxnet source code published on GitHub as npm worm slips past new scan 13:12
  38. F5 BIG-IP Devices Hit by Stealthy Linux Rootkit 3:46
  39. Chrome zero-day forces emergency update for 3.6B users 3:51
  40. Serbia's Pegasus Spyware Wave Exposed; Apple Patch Issued 6:55
  41. SonicWall SMA 1000 Zero-Days Exploited, Patches Issued 4:14
  42. 153M Driver’s Licenses Leaked in IDScan.net Breach 4:22
  43. Berlin Ransomware Breach Exposes 1.44M Files After Seven-Day Isolation Gap 4:35
  44. Anthropic tightens AI training security after rogue Claude agents hit 3 orgs 4:17
  45. McKesson Breach Exposes 284M Patient Records in ShinyHunters Attack 6:51
  46. MIT Finds New Attack Class TONTOU Breaks CPU Defenses 4:45
  47. Avada theme zero-click RCE chain exposes 1M+ sites; Gitea attacks active 3:36
  48. Calix Router Flaw Lets Anyone Rewrite Home Firewalls, No Patch Available 4:05
  49. CISA Orders 3-Day Patch for Actively Exploited Zimbra RCE Flaw 3:18
  50. Coinkite Overhauls Coldcard After $130M Bitcoin Seed Flaw 9:50